EU Cosmetics Regulation 1223/2009 — A Plain-Language Guide for Manufacturers

A North American brand I worked with recently had a well-formulated moisturizer that had sailed through FDA review. When they decided to launch in Germany and France, they discovered the product needed a complete reformulation, a new safety assessment, a designated Responsible Person inside the EU, and a notification through a portal they had never heard of — all before a single unit could legally sit on a shelf. That experience is more common than it should be, and it is why understanding Regulation (EC) No 1223/2009 before you begin is not optional.

This article is for cosmetic manufacturers, brand owners, and regulatory affairs managers who need a working understanding of EU cosmetics law without wading through 80 pages of legislative text.

What Is Regulation (EC) No 1223/2009?

Regulation (EC) No 1223/2009 of the European Parliament and of the Council on cosmetic products is the primary legal framework governing cosmetics sold in the European Union. It replaced the earlier Cosmetics Directive 76/768/EEC and has been directly applicable across all EU member states since 11 July 2013. Unlike a directive, a regulation does not require national transposition — it applies uniformly, which simplifies compliance for brands selling across multiple EU countries.

The regulation defines a cosmetic product as any substance or mixture intended to be placed in contact with the external parts of the human body — skin, hair, nails, lips, external genital organs — or with the teeth and mucous membranes of the oral cavity, with the sole or main intention of cleaning, perfuming, changing appearance, protecting, keeping in good condition, or correcting body odours.

That definition matters. Products that straddle the line between cosmetics and medicines — certain sunscreens, anti-dandruff shampoos, or products making therapeutic claims — may be classified differently depending on the member state, and classification determines which regulatory pathway applies.

The Five Core Obligations

1. Product Information File (PIF)

Every cosmetic product placed on the EU market must have a Product Information File maintained at the address of the Responsible Person. The PIF must include a description of the cosmetic product, the Cosmetic Product Safety Report (CPSR), a description of the manufacturing method, a statement of compliance with Good Manufacturing Practice (GMP — EN ISO 22716:2007 is the applicable standard), proof of the claimed effect where justified, and data on animal testing.

The PIF must be kept for ten years after the last batch of the product is placed on the market and must be accessible to competent authorities on request.

2. Cosmetic Product Safety Report (CPSR)

The CPSR is a two-part document. Part A contains the safety information: quantitative and qualitative composition, physical and chemical characteristics, microbiological quality, impurities, packaging material information, normal and reasonably foreseeable use, exposure to the cosmetic product, exposure to the substances, toxicological profile of the substances, and undesirable effects. Part B contains the safety assessment: a conclusion on safety, labelling warnings, and the assessor’s reasoning and credentials.

Critically, Part B must be signed by a qualified safety assessor — a person holding a degree in pharmacy, toxicology, medicine, or a similar discipline. This is not a role that can be filled by a general consultant without the appropriate academic background.

3. Responsible Person (RP)

Every cosmetic product placed on the EU market must have a designated Responsible Person established within the EU. The RP bears legal responsibility for compliance. For non-EU manufacturers, this typically means appointing an EU-based entity — a distributor, importer, or specialist regulatory services firm — to act as RP. The RP’s name and address must appear on the product label.

4. CPNP Notification

Before placing a cosmetic product on the EU market, the Responsible Person must submit a notification through the Cosmetic Products Notification Portal (CPNP). The notification includes the product category, the product name, the country of first placement on the market, the RP details, the frame formulation or full ingredient list, the original label and a translation where applicable, and — for products containing nanomaterials — specific additional information.

5. Labeling Requirements

Labels must include: the name and address of the Responsible Person; the nominal content by weight or volume; the date of minimum durability (or the period after opening, indicated by the open jar symbol); particular precautions for use; the batch number; the function of the product; and the list of ingredients using INCI nomenclature.

Key Differences from FDA Cosmetics Rules

Under the United States Federal Food, Drug, and Cosmetic Act, cosmetics are not subject to pre-market approval. The FDA does not require a safety assessment signed by a qualified assessor, does not mandate a Product Information File, and does not operate a mandatory pre-market notification portal equivalent to the CPNP. The EU framework is considerably more prescriptive. Brands accustomed to the US system often underestimate the documentation burden the EU requires.

It is also worth noting that the EU’s list of prohibited and restricted substances (Annexes II through VI of the Regulation) is substantially longer than the FDA’s prohibited list. Ingredients that are permitted in US formulations — certain preservatives, UV filters, and colorants — may be restricted or prohibited in the EU. A full ingredient-by-ingredient review against the current Annexes is essential before any EU launch.

Practical Action Step

Before submitting your first CPNP notification, work through this pre-launch checklist:

Confirm your product falls within the EU definition of a cosmetic (not a borderline medicine or biocide)
Identify or appoint a qualified Responsible Person established in the EU
Commission a Cosmetic Product Safety Report from a qualified safety assessor
Verify all ingredients against Annexes II–VI of Regulation (EC) No 1223/2009
Confirm GMP compliance against EN ISO 22716:2007
Assemble the full Product Information File
Prepare INCI-compliant ingredient labeling in all required EU languages
Register on the CPNP and submit the product notification before market placement

Requirements may vary by member state for certain product categories, and the regulatory landscape continues to evolve — particularly around nanomaterials, endocrine disruptors, and CMR substances. Consult a qualified EU regulatory expert before finalising your compliance strategy.

Care Europe supports brands at every stage of EU cosmetics compliance, from safety assessment coordination to Responsible Person services and CPNP notification management. Contact us to discuss your product portfolio.

EU Cosmetics Regulation 1223/2009 — A Plain-Language Guide for Manufacturers